[aynawn]

As a terraform SAST tool, this has competition with tfsec, tflint, and checkov. I do like how it also checks the kubernetes yaml.

I'd like if these types of articles would mention the competitors to show what additional value that the one they pitch brings to the table.

[tommd]

What are your thoughts on the overlap between these tools? I have a CI SaaS with checkov by default. It performs really well and requires no configuration, which was exciting. Tfsec would be easy to add but I'm not sure how duplicative it is of checkov. Anyone here have opinions?